Alpine/libssh: high 8.8
A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return valu
Action: Upgrade libssh to 0.11.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.2-r0 | - |
Fixed versions
| 0.11.2-r0 |
Sources
published · modified · JSON